Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
File: 1-c0pgMHHi89rubgKB5IFiwvK7Us.mft (raw, json)
Hash identifier: InZi7PlC2HcK42jMPzizq4+Fef7DfU2b8DsKnMQuefI=
Subject key identifier: 7C:A8:09:A1:D3:DA:E9:5C:63:BA:68:93:8B:45:C5:CC:00:38:AD:40
Authority key identifier: F9:CD:29:80:C1:C7:8B:CF:6B:B9:B8:0A:07:92:05:8B:0B:CA:ED:4B
Certificate issuer: /CN=f9cd2980c1c78bcf6bb9b80a0792058b0bcaed4b
Certificate serial: 01A0CDECBAC9732503BFCBD28FCD3F0F8AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
Manifest number: 1A29
Signing time: Wed 23 Sep 2026 11:00:38 +0000
Manifest this update: Wed 23 Sep 2026 11:00:38 +0000
Manifest next update: Thu 24 Sep 2026 11:00:38 +0000
Files and hashes: 1: 1-c0pgMHHi89rubgKB5IFiwvK7Us.crl (hash: WXupmrGbW92ysDg210Q0YFLf6fOFGqTEM/eeOKB9kdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:ba:c9:73:25:03:bf:cb:d2:8f:cd:3f:0f:8a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cd2980c1c78bcf6bb9b80a0792058b0bcaed4b
Validity
Not Before: Sep 23 11:00:38 2026 GMT
Not After : Sep 24 11:00:38 2026 GMT
Subject: CN=7ca809a1d3dae95c63ba68938b45c5cc0038ad40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5f:e2:a3:1a:58:f3:72:fa:4d:c0:7f:9a:b4:
e5:64:85:1c:7a:87:48:0e:05:f9:8b:c7:73:8e:e2:
5e:c3:f7:6f:40:b0:83:61:8c:76:51:ad:a5:52:48:
2e:47:94:51:3f:3f:e2:08:37:78:2a:bd:e7:31:95:
2c:ab:44:71:39:98:a7:de:c2:0b:e1:92:b8:ad:08:
75:68:98:c7:bb:c1:31:b4:c1:19:32:00:01:bb:c8:
c8:2b:8e:48:8c:bc:e6:d0:6b:65:4d:d4:4c:46:02:
14:98:7c:7d:97:49:3d:23:3f:95:cf:4a:d1:77:28:
4a:36:a7:9d:9d:8f:44:9d:50:ba:d4:f3:40:76:8a:
ee:47:7d:c0:49:65:79:cd:bf:0e:52:89:ca:d0:b3:
99:06:dd:c4:24:9d:77:75:e4:cb:0c:53:47:89:a2:
d4:90:fb:19:9d:f1:82:60:3d:b0:56:56:9f:fc:d3:
f0:6d:17:4d:f8:61:24:ef:4a:57:95:d7:01:a6:83:
af:f9:7c:72:0e:e2:03:f6:18:e1:71:28:e0:2a:a1:
51:7b:d3:10:56:a5:26:b9:2d:0f:06:13:04:33:03:
56:8c:32:7e:3f:d0:a0:0a:5f:b3:04:99:bd:8a:14:
83:3a:cf:2b:8f:f4:14:3c:ff:4d:5f:dc:eb:95:9c:
b5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A8:09:A1:D3:DA:E9:5C:63:BA:68:93:8B:45:C5:CC:00:38:AD:40
X509v3 Authority Key Identifier:
keyid:F9:CD:29:80:C1:C7:8B:CF:6B:B9:B8:0A:07:92:05:8B:0B:CA:ED:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:99:ff:15:82:ec:31:47:8b:2f:b8:ba:03:07:eb:9f:fc:73:
b7:01:87:f7:69:3f:91:9b:ef:0a:05:34:73:d5:0a:67:15:24:
93:80:d0:1c:f6:c7:e1:e9:2b:9a:ef:52:2b:f2:17:c3:c0:5e:
e2:b8:e7:76:13:b6:52:9f:1f:45:e8:20:63:9a:50:37:a9:36:
d5:3f:0c:03:b5:bf:3e:ac:30:4e:50:86:00:52:a5:3d:c1:9b:
40:bf:3e:4c:04:34:48:97:39:a0:c5:8b:96:7f:4a:c5:89:74:
3c:6c:50:ac:47:31:b0:3c:69:70:6e:0f:34:9e:8b:5b:88:18:
93:99:93:9b:f9:1a:0a:20:15:88:e3:c5:e1:0c:55:ca:2e:d7:
66:1c:46:76:bd:3e:94:98:9a:5a:6d:87:b4:91:4f:e0:87:78:
fd:3d:e5:e1:be:2a:01:d9:e6:ae:f9:cd:bc:51:14:3f:c5:17:
c5:96:ee:fd:e9:20:c4:9f:53:36:32:b7:aa:95:a1:47:01:14:
4d:ce:a4:fb:c1:95:cd:8b:09:b6:74:ce:16:ca:8f:6a:03:90:
0e:92:c0:08:59:a2:bc:93:73:b2:0e:5d:2c:63:5e:1a:8a:8b:
a7:f0:c6:5a:d6:7b:79:c7:7f:58:26:44:5b:6f:66:14:d4:cf:
ec:2d:c6:80
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDN7LrJcyUDv8vSj80/D4q4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5Y2QyOTgwYzFjNzhiY2Y2YmI5YjgwYTA3OTIwNThiMGJj
YWVkNGIwHhcNMjYwOTIzMTEwMDM4WhcNMjYwOTI0MTEwMDM4WjAzMTEwLwYDVQQD
Eyg3Y2E4MDlhMWQzZGFlOTVjNjNiYTY4OTM4YjQ1YzVjYzAwMzhhZDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2F/ioxpY83L6TcB/mrTlZIUceodI
DgX5i8dzjuJew/dvQLCDYYx2Ua2lUkguR5RRPz/iCDd4Kr3nMZUsq0RxOZin3sIL
4ZK4rQh1aJjHu8ExtMEZMgABu8jIK45IjLzm0GtlTdRMRgIUmHx9l0k9Iz+Vz0rR
dyhKNqednY9EnVC61PNAdoruR33ASWV5zb8OUonK0LOZBt3EJJ13deTLDFNHiaLU
kPsZnfGCYD2wVlaf/NPwbRdN+GEk70pXldcBpoOv+XxyDuID9hjhcSjgKqFRe9MQ
VqUmuS0PBhMEMwNWjDJ+P9CgCl+zBJm9ihSDOs8rj/QUPP9NX9zrlZy11QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHyoCaHT2ulcY7pok4tFxcwAOK1AMB8GA1UdIwQY
MBaAFPnNKYDBx4vPa7m4CgeSBYsLyu1LMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1jMHBnTUhIaTg5cnViZ0tCNUlGaXd2SzdVcy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIvYzg3OTdiLTAyZTAtNDcxOC1iZGZk
LTA5MjljYmNkYjdhYS8xLzEtYzBwZ01ISGk4OXJ1YmdLQjVJRml3dks3VXMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzcyL2M4Nzk3Yi0wMmUwLTQ3MTgtYmRmZC0wOTI5Y2JjZGI3
YWEvMS8xLWMwcGdNSEhpODlydWJnS0I1SUZpd3ZLN1VzLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz5n/
FYLsMUeLL7i6Awfrn/xztwGH92k/kZvvCgU0c9UKZxUkk4DQHPbH4ekrmu9SK/IX
w8Be4rjndhO2Up8fReggY5pQN6k21T8MA7W/PqwwTlCGAFKlPcGbQL8+TAQ0SJc5
oMWLln9KxYl0PGxQrEcxsDxpcG4PNJ6LW4gYk5mTm/kaCiAViOPF4QxVyi7XZhxG
dr0+lJiaWm2HtJFP4Id4/T3l4b4qAdnmrvnNvFEUP8UXxZbu/ekgxJ9TNjK3qpWh
RwEUTc6k+8GVzYsJtnTOFsqPagOQDpLACFmivJNzsg5dLGNeGoqLp/DGWtZ7ecd/
WCZEW29mFNTP7C3GgA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:08:47 2026 by rpki-client